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DETAILED ACTION 

1 . Claims 1-20 are presented for examination. 

Response to Arguments 

2. Applicant's arguments filed February 14, 201 1 have been fully 
considered but they are not persuasive because of the following reasons: 

3. Applicant argues that Win does not teach or disclose "pass-through 
authentication" or "anonymous authentication". 

4. In response to applicant's argument, the examiner submits that Win 
does teach pass-through authentication (col. 6, line 10-col. 7, line 6, col. 12, line 

1 0-53 -Registry server using Authentication server module to authenticate user 
via Registry Repository (i.e., database), and anonymous authentication (col. 8, 
line 5-col. 9, line 1 2 -Authenticate and permit user to access to certain source 
based on user role). 

5. Applicant argues that Win does not teach Open Database 
Connectivity (ODBC) which described in the specification as a method of 
communicating with databases or database servers and Win simply does not 
even suggest such communication in its system. 

6. In response to applicant's argument, the examiner asserts that Win 
does teach this feature as shown in figures 1 , 3, 5, col. 6, lines 41 -col. 7, line 67 
-the access server 106 authenticates/verifies user name/password with Registry 
sever 108). 

7. Applicant argues that Win does not teach any type of On-Line 
Analytical processing (OLAP) decision support system (DSS), and a plurality of 
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authentication processes comprising a standard-node authentication, pass- 
through authentication, and anonymous authentication, and applying the 
authentication process to authenticate the user against remote repository using 
Open Database Connectivity (ODBC). Applicant also argues that Hellbusch fails 
to teach these features. 

In response to applicant's arguments against the references individually, 
one cannot show nonobviousness by attacking references individually where the 
rejections are based on combinations of references. See In re Keller, 642 
F.2d 413, 208 USPQ 871 (CCPA 1981); In re Merck & Co., 800 F.2d 1091, 231 
USPQ 375 (Fed. Cir. 1986). 

8. Applicant argues that the combination based on hindsight 
reasoning. 

In response to applicant's argument that the examiner's conclusion of 
obviousness is based upon improper hindsight reasoning, it must be recognized 
that any judgment on obviousness is in a sense necessarily a reconstruction 
based upon hindsight reasoning. But so long as it takes into account only 
knowledge which was within the level of ordinary skill at the time the claimed 
invention was made, and does not include knowledge gleaned only from the 
applicant's disclosure, such a reconstruction is proper. See In re McLaughlin, 
443 F.2d 1392, 170 USPQ 209 (CCPA 1971). 

9. Applicant argues that Win reference teaches away from a 
combination with Hellbusch. 
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1 0. In response to applicant's argument, the examiner asserts that Win 
teaches a method and system for secure sign-on gives a user access to 
authorized Web resources based on user's information (see abstract). Hellbusch 
provides a federated system that interconnects applications of multiple 
companies called Enterlink which provides security services are the key to the 
viability of the Enterlink to enable private and integrated applications together into 
an overall federated system (see col. 15, lines 45-57). Thus, Win in combination 
with Hellbusch to provide a security system to access resources. 



Claim Rejections - 35 USC § 103 

1 1 . The following is a quotation of 35 U.S.C. 1 03(a) which forms the 
basis for all obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described 
as set forth in section 1 02 of this title, if the differences between the subject matter sought to 
be patented and the prior art are such that the subject matter as a whole would have been 
obvious at the time the invention was made to a person having ordinary skill in the art to which 
said subject matter pertains. Patentability shall not be negatived by the manner in which the 
invention was made. 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for 
all obviousness rejections set forth in this Office action: (a) A patent may not be 
obtained though the invention is not identically disclosed or described as set forth 
in section 102 of this title, if the differences between the subject matter sought to 
be patented and the prior art are such that the subject matter as a whole would 
have been obvious at the time the invention was made to a person having 
ordinary skill in the art to which said subject matter pertains. Patentability shall 
not be negatived by the manner in which the invention was made. 6. The factual 
inquiries set forth in Graham v. John Deere Co,, 383 U.S. 1,148 USPQ 459 
(1 966), that are applied for establishing a background for determining 
obviousness under 35 U.S.C. 103(a) are summarized as follows: 1. Determining 
the scope and contents of the prior art. 2. Ascertaining the differences between 
the prior art and the claims at issue. 3. Resolving the level of ordinary skill in the 
pertinent art. 4. Considering objective evidence present in the application 
indicating obviousness or nonobviousness. 
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1 2. Claims 1 -20 are rejected under 35 U.S.C. § 1 03 (a) as being 
unpatentable over Win et al. (hereinafter Win) U.S. Patent No. 6,453,353, in view 
of Hellbusch et al. (Hellbusch) U.S. Patent No. 7,231,433. 

1 3. As to claim 1 , Win teaches the invention as claimed, including a 
method for integrating security and user account data in a reporting system with 
at least one remote repository comprising the steps of: 

enabling a user to submit user credential input to a reporting system 
(figure 1 , col. 5, lines 12-20, col. 6, lines 20-40 -receiving user registers/log-in to 
the system/central repository/registry repository at a registry server); 

identifying an authentication process (figure 1, col. 6, lines 41 -col. 7, line 
6) from a plurality of authentication process comprising a standard-mode 
authentication (fig. 5A, col. 9, lines 41-60), pass-through authentication (col. 6, 
line 10-col. 7, line 6, col. 12, line 10-53 -Registry server using Authentication 
server module to authenticate user via Registry Repository (i.e., database), and 
anonymous authentication (col. 8, line 5-col. 9, line 1 2 -Authenticate and permit 
user to access to certain source based on user role) ; 

forwarding the user credential input to a first server (figures 1 , 3, 5, col. 8, 
line 5-col. 10, line 33 -forwarding to access server 106 for authentication); and 

enabling the first server to apply the authentication process to authenticate 
the user against a remote repository using Open Database Connectivity (ODBC) 
{i.e., Register Repository) for verifying the user credential input (figures 1 , 3, 5, 
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col. 6, lines 41 -col. 7, line 67 -the access server 106 authenticates/verifies user 
name/password with Registry sever 108 ) and to determine user access control 
data for identifying at least one user privilege for performing one or more actions 
and at least one user permission associated with one or more objects (abstract, 
col. 5, line 66-col. 6, line 17, col. 8, lines 5-23, col. 1 1 , lines 42-64 -providing 
user a personalized menu that displays only resources that user has a right to 
access according to user's profile, including user's role and privileges), wherein 
the remote repository is located within a second server, the second server being 
different from the first server (figure 1 , col. 6, lines 20-26 and 41-54 - the registry 
repository 110 at the registry server 108 that stores user information, resources, 
users' role that can be used by access server 106 to authorize user's privileges 
and wherein the access server 106 and registry server 108 are different). 

However, Win does not explicitly teach wherein the reporting system 
comprises an On-Line Analytical Processing (OLAP) decision support system 
(DSS). 

Hellbusch teaches the reporting system comprises an On-Line Analytical 
Processing (OLAP) decision support system (DSS) (col. 5, lines 26-37). 

It would have been obvious to one of ordinary skill in the Data Processing 
art at the time of the invention was made to modify the teachings of Win to 
include OLAP decision support system as disclosed by Hellbusch in order to 
provide a useful architecture that interconnects applications of multiple 
enterprises into a single federated system. 
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14. As to claim 2, Win teaches the invention as claimed, further 
comprising a step of importing user information from the remote repository (figure 
1 , col. 5, lines 12-20, col. 6, lines 20-26, col. 7, lines 45-57). 

1 5. As to claim 3, Win teaches the invention as claimed, wherein the 
authentication process comprises Lightweight Directory Access Protocol (col. 12, 
lines 10-53). 

1 6. As to claim 4, Win teaches the invention as claimed, wherein the 
authentication process comprises an operating system authentication (figures 1 , 
3, 5, col. 6, lines 41 -col. 7, line 67). 

1 7. As to claim 5, Win teaches the invention as claimed, further 
comprising a step of enabling the server to synchronize user account data with 
the user information from the remote repository (col. 7, lines 34-67, col. 19, line 
50-col. 20, line 53). 

1 8. As to claim 6, Win teaches wherein the user is associated with a 
group of users wherein group information from the remote repository is imported 
(figure 1 , col. 5, lines 1 2-20, col. 6, lines 20-26, col. 7, lines 45-57). 

1 9. As to claim 7, Win teaches the invention as claimed, wherein the 
user information comprises at least one or user permissions, privileges and 
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access rights associated with the user (abstract, col. 5, line 66-col. 6, line 17, col. 
8, lines 5-23, col. 1 1 , lines 42-64). 

20. As to claim 8, Win teaches the invention as claimed, including a 
system for integrating security and user account data in a reporting system with 
at least one remote repository, comprising: 

an input for enabling a user to submit user credential input to a reporting 
system (figure 1 , col. 5, lines 1 2-20, col. 6, lines 20-40 -receiving user 
registers/log-in to the system/central repository) ; 

an identification module for identifying an authentication process (figure 1 , 
col. 6, lines 41 -col. 7, line 6) from a plurality of authentication process comprising 
a standard-mode authentication (fig. 5A, col. 9, lines 41-60), pass-through 
authentication (col. 6, line 10-col. 7, line 6, col. 12, line 10-53 -Registry server 
using Authentication server module to authenticate user via Registry Repository 
(i.e., database), and anonymous authentication (col. 8, line 5-col. 9, line 12 - 
Authenticate and permit user to access to certain source based on user role); 

a forwarding module for forwarding the user credential input to a first 
server (figures 1 , 3, 5, col. 8, line 5-col. 10, line 33 -forwarding to access server 
106 for authentication); and 

a first server for applying the authentication process to authenticate the 
user against a remote repository using Open Database Connectivity (ODBC) 
(i.e., Register Repository) for verifying the user credential input (figures 1 , 3, 5, 
col. 6, lines 41 -col. 7, line 67 -the access server 106 authenticates/verifies user 
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name/password with Registry sever 108) and to determine user access control 
data for identifying at least one user privilege for performing one or more actions 
and at least one user permission associated with one or more objects (abstract, 
col. 5, line 66-col. 6, line 17, col. 8, lines 5-23, col. 1 1 , lines 42-64 -providing 
user a personalized menu that displays only resources that user has a right to 
access according to user's profile, including user's role and privileges), wherein 
the remote repository is located within a second server, the second server being 
different from the first server (figure 1 , col. 6, lines 20-26 and 41 -54 - the registry 
repository 110 at the registry server 108 that stores user information, resources, 
users' role that can be used by access server 106 to authorize user's privileges 
and wherein the access server 106 and registry server 108 are different). 
However, Win does not explicitly teach wherein the reporting system comprises 
an On-Line Analytical Processing (OLAP) decision support system (DSS). 

Hellbusch teaches the reporting system comprises an On-Line Analytical 
Processing (OLAP) decision support system (DSS) (col. 5, lines 26-37). 

It would have been obvious to one of ordinary skill in the Data Processing 
art at the time of the invention was made to modify the teachings of Win to 
include OLAP decision support system as disclosed by Hellbusch in order to 
provide a useful architecture that interconnects applications of multiple 
enterprises into a single federated system. 
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21 . As to claim 9, Win teaches the invention as claimed, further 
comprising an import module for importing user information from the remote 
repository (figure 1, col. 5, lines 12-20, col. 6, lines 20-26, col. 7, lines 45-57). 

22. As to claim 1 0, Win teaches the invention as claimed, wherein the 
authentication process comprises Lightweight Directory Access Protocol (col. 12, 
lines 10-53). 

23. As to claim 1 1 , Win teaches the invention as claimed, wherein the 
authentication process comprises an operating system authentication (figures 1 , 
3, 5, col. 6, lines 41 -col. 7, line 67). 

24. As to claim 1 2, Win teaches the invention as claimed, wherein the 
server synchronizes user account data with the user information from the remote 
repository (col. 7, lines 34-67, col. 19, line 50-col. 20, line 53). 

25. As to claim 1 3, Win teaches wherein the user is associated with a 
group of users wherein group information from the remote repository is imported 
(figure 1 , col. 5, lines 1 2-20, col. 6, lines 20-26, col. 7, lines 45-57). 

26. As to claim 14, Win teaches the invention as claimed, wherein the 
user information comprises at least one or user permissions, privileges and 
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access rights associated with the user (abstract, col. 5, line 66-col. 6, line 17, col. 
8, lines 5-23, col. 1 1 , lines 42-64). 

27. As to claim 1 5, Win teaches the invention as claimed, including a 
non-transitory processor-readable medium comprising instructions for execution 
by a processor to integrate security and user account data in a reporting system 
with at least one remote repository, the medium comprising: 

instructions for causing a processor to enable a user to submit user 
credential input to a reporting system (figure 1 , col. 5, lines 12-20, col. 6, lines 
20-40 -receiving user registers/log-in to the system/central repository); 

instructions for causing a processor to identify an authentication process 
(figure 1 , col. 6, lines 41 -col. 7, line 6) from a plurality of authentication process 
comprising a standard-mode authentication (fig. 5A, col. 9, lines 41-60), pass- 
through authentication (col. 6, line 10-col. 7, line 6, col. 12, line 10-53 -Registry 
server using Authentication server module to authenticate user via Registry 
Repository (i.e., database), and anonymous authentication (col. 8, line 5-col. 9, 
line 1 2 -Authenticate and permit user to access to certain source based on user 
role); 

instructions for causing a processor to forward the user credential input to 
a first server (figures 1 , 3, 5, col. 8, line 5-col. 10, line 33 -forwarding to access 
server 106 for authentication); and 

instructions for causing a processor to enable the first server to apply the 
authentication process to authenticate the user against a remote repository using 
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Open Database Connectivity (ODBC) (i.e., Register Repository) for verifying the 
user credential input (figures 1 , 3, 5, col. 6, lines 41 -col. 7, line 67 -the access 
server 106 authenticates/verifies user name/password with Registry sever 108) 
and to determine user access control data for identifying at least one user 
privilege for performing one or more actions and at least one user permission 
associated with one or more objects (abstract, col. 5, line 66-col. 6, line 17, col. 
8, lines 5-23, col. 1 1 , lines 42-64 -providing user a personalized menu that 
displays only resources that user has a right to access according to user's profile, 
including user's role and privileges), wherein the remote repository is located 
within a second server, the second server being different from the first server 
(figure 1 , col. 6, lines 20-26 and 41 -54 - the registry repository 1 10 at the registry 
server 108 that stores user information, resources, users' role that can be used 
by access server 106 to authorize user's privileges and wherein the access 
server 106 and registry server 108 are different). 

However, Win does not explicitly teach wherein the reporting system 
comprises an On-Line Analytical Processing (OLAP) decision support system 
(DSS). 

Hellbusch teaches the reporting system comprises an On-Line Analytical 
Processing (OLAP) decision support system (DSS) (col. 5, lines 26-37). 

It would have been obvious to one of ordinary skill in the Data Processing 
art at the time of the invention was made to modify the teachings of Win to 
include OLAP decision support system as disclosed by Hellbusch in order to 
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provide a useful architecture that interconnects applications of multiple 
enterprises into a single federated system. 

28. As to claim 1 6, Win teaches the invention as claimed, further 
comprising instructions for causing a processor to import user information from 
the remote repository (figure 1, col. 5, lines 12-20, col. 6, lines 20-26, col. 7, lines 
45-57). 

29. As to claim 1 7, Win teaches the invention as claimed, wherein the 
authentication process comprises at least one of Lightweight Directory Access 
Protocol and operating system authentication (col. 12, lines 10-53). 

30. As to claim 1 8, Win teaches the invention as claimed, further 
comprising instructions for causing a processor to enable the server to 
synchronize user account data with the user information from the remote 
repository (col. 7, lines 34-67, col. 19, line 50-col. 20, line 53). 

31 . As to claim 1 9, Win teaches wherein the user is associated with a 
group of users wherein group information from the remote repository is imported 
(figure 1 , col. 5, lines 1 2-20, col. 6, lines 20-26, col. 7, lines 45-57). 

32. As to claim 20, Win teaches the invention as claimed, wherein the 
user information comprises at least one or user permissions, privileges and 
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access rights associated with the user (abstract, col. 5, line 66-col. 6, line 17, col. 
8, lines 5-23, col. 1 1 , lines 42-64). 

Conclusion 

33. THIS ACTION IS MADE FINAL. Applicant is reminded of the 
extension of time policy as set forth in 37 CFR 1 .1 36(a). 

A shortened statutory period for reply to this final action is set to expire 
THREE MONTHS from the mailing date of this action. In the event a first reply is 
filed within TWO MONTHS of the mailing date of this final action and the advisory 
action is not mailed until after the end of the THREE-MONTH shortened statutory 
period, then the shortened statutory period will expire on the date the advisory 
action is mailed, and any extension fee pursuant to 37 CFR 1 .1 36(a) will be 
calculated from the mailing date of the advisory action. In no event, however, will 
the statutory period for reply expire later than SIX MONTHS from the mailing 
date of this final action. 

34. Any inquiry concerning this communication or earlier 
communications from the examiner should be directed to Thu Ha Nguyen, whose 
telephone number is (703) 305-7447. The examiner can normally be reached 
Monday through Friday from 8:00 AM to 6:00 PM. 

35. If attempts to reach the examiner by telephone are unsuccessful, 
the examiner's supervisor, Krista Zele, can be reached at (571) 272-7288. 



Application/Control Number: 09/883,300 Page 15 

Art Unit: 2453 

Any inquiry of a general nature of relating to the status of this application 
should be directed to the Group receptionist whose telephone number is (703) 
305-9600. 

The fax phone numbers for the organization where this application or 
proceeding is assigned are 703-872-9306 for regular communications. 

Information regarding the status of an application may be obtained from 
the Patent Application Information Retrieval (PAIR) system. Status information 
for published applications may be obtained from either Private PAIR or Public 
PAIR. Status information for unpublished applications is available through 
Private PAIR only. For more information about the PAIR system, see http://pair- 
direct.uspto.gov . Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll- 
free). 



/THUHAT. NGUYEN/ 
Primary Examiner, Art Unit 2453 
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